openstack
/
tripleo-image-elements
Code Issues Proposed changes
tripleo-image-elements/elements/overcloud-secure-uefi
History
Yolanda Robla aa19a7f92a Increase size for security hardened images 
With the move to containers there has been an increase of
demand on the /var volume. Increase the global size, as well
as give more percentage to /var and reduce /root.

Also fix fsck-passno setting, that was incorrectly set.

Change-Id: I8d820f668ffffe5993d5fef38e0c1e8c5f5862ec
Depends-On: Ib806bac815077c2508060719469b5d0f1acc0f99
 		2018-10-04 18:08:49 +02:00
..
README.rst Add overcloud-secure-uefi element 2018-06-19 13:50:52 +02:00
block-device-default.yaml Increase size for security hardened images 2018-10-04 18:08:49 +02:00
element-deps Add overcloud-secure-uefi element 2018-06-19 13:50:52 +02:00
package-installs.yaml Add overcloud-secure-uefi element 2018-06-19 13:50:52 +02:00

README.rst

overcloud-secure-uefi

CAUTION: This element is part of the security hardened images feature, that is delivered in this release as tech preview. The following element is not intended for production usage.

overcloud-secure-uefi is an element to add extra security hardening features to the tripleo images: partition creation and unsafe package uninstall. This element is the equivalent of overcloud-secure one, but is used when needed to build images that are capable of booting from uefi.

It includes the block-device-default definition, that creates independent partitions on the overcloud image, allowing those to accomplish the ANSSI security requirements. Please note that the sizes of the partitions may not be enough for production usage, they will need to be resized properly after deployment depending on the available disk size.